If you have an item you'd like to contribute to Digital Forensics Case Leads, please send it to caseleads@sans.org.

Tools:

The HoneyMap shows real-time visualisation of attacks against the Honeynet Project's sensors deployed around the world. It leverages the internal data sharing protocol hpfeeds as its data source. Read this post to learn about the technical details and frequently asked questions.

BlackLight is a multi-platform forensic analysis tool that allows examiners to quickly and intuitively analyze digital forensic media. BlackLight's core strength is Mac OS X and iOS (iPhone and iPad) data analysis. Latest release features included Skype analysis, new IOS and OS X support and several others.

Image-Pro Premier is an image analysis software by MediaCybernetics it offers intuitive tools that make it easy to capture, process, measure, analyze and share your images and valuable data. The new Image-Pro Premier offers 64-bit support, a user-friendly interface, intuitive macros and app building tools, new and improved ways to automatically segment, classify and measure objects, and more tools for customizing your workflow.

Good Reads:

Why SSD Drives Destroy Court Evidence? and What Can Be Done About It? a nice article about SSD drives that describe how they work, what can and can't be recovered and more?

Scottish-based research to help tackle e-crime, this time using quantum physics and tiny light particles to foil hackers and online criminals, it may sound like the stuff of Bond movies and sci-fi thrillers!

Digital Forensics steps into next level, Cloud Forensics? imagine how much processing power and time you need!

The FBI wants tougher wiretap laws, and in its "Going Dark" campaign it's enlisted Homeland Security for examples of how companies like Comcast, Cricket, and T-Mobile are standing in the way!!

UK cybercrime victims get response team to call on after attacks, The scheme, backed by GCHQ and the government, is based on the expertise of 'quality-assured' companies from the private sector such as BAE Systems Detica, Mandiant, Cassidian and Context IS.

About the author: By Maher Yamout, CCNA, CNDA, ECSA, GCFE. Maher Yamout is an Information Security Officer and Digital Forensic Examiner with the Lebanese Ministry of Finance. He was involved in cyber-security exam item writing with EC-Council and Prometric. Maher is also member of the High Tech Crime Investigation Association (HTCIA) Europe-at-Large chapter.

"This course ROCKS! You can not call yourself a Forensics expert without taking the course from Rob Lee!."- Ernie Hernandez, Prosoft

"For my line of work, basic &amp;amp; extensive understanding of the file system is extremely important. The literature and books on file systems for me are very critical &amp;amp; thanks you for them, great reference material"- Vince Ramirez, Las Vegas Metro P.D.

"Rob Lee is a master of the subject matter. The material is presented in a way that is understandable. Rob is also charismatic enough to make the course enjoyable."- Erik Ketlet, JP Morgan Chase